NewsThe Hacker NewsSMEFinancePublic sector

    Fake LastPass Authenticator Installer Abuses Microsoft-Signed Driver to Kill Antivirus and EDR

    Share
    A fake LastPass Authenticator installer offered on GitHub installs a Windows kernel driver that shuts off antivirus and other security software before a password stealer runs if a victim downloads and runs it, researchers at LastPass and Delphos Labs said on September 17. Microsoft's own hardware-compatibility program signs the driver, scored zero detections on VirusTotal when researchers

    More on LastPass

    Other advisories

    Other news entries

    Source: https://thehackernews.com/2026/09/fake-lastpass-authenticator-installer.html

    ID